raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

RUSTSEC-2026-0345 Untrusted labels can inject SVG attributes, CSS values, and terminal escape sequences

Affected versions of kuva wrote data-derived strings straight into rendered output without escaping them for the target format. Applications that plot untrusted input column headers, category and group names, series labels were affected in three places. 1. SVG attribute injection / stored XSS...

Untrusted labels can inject SVG attributes, CSS values, and terminal escape sequences

Affected versions of kuva wrote data-derived strings straight into rendered output without escaping them for the target format. Applications that plot untrusted input column headers, category and group names, series labels were affected in three places. 1. SVG attribute injection / stored XSS...

SUSE CVE-2026-58459

gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot title without proper escaping. The...

Linux Distros Unpatched Vulnerability : CVE-2026-58459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device...

backtrader-plotting (1.1.0), biome-text (1.0.0rc1) +4 more potentially affected by CVE-2026-21883 via bokeh (2.0.2)

bokeh PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - backtrader-plotting 1.1.0 - biome-text 1.0.0rc1 - dataprep =0.2.2, =0.11.5, =0.0.0, =1.3.1 - plotgallery 0.2.0 Source cves: CVE-2026-21883 Source...

backtrader-plotting (0.5.3), dye-score (0.1.0) +3 more potentially affected by CVE-2026-21883 via bokeh (1.0.4)

bokeh PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - backtrader-plotting 0.5.3 - dye-score 0.1.0 - explorepy 0.5.0 - flexmeasures =0.2.4.dev12, =0.11.3 - jsmol-bokeh-extension 0.1.0.2 Source cves:...

[SECURITY] Fedora 44 Update: kf6-kquickcharts-6.25.0-1.fc44

The Quick Charts module provides a set of charts that can be used from QtQuick applications. They are intended to be used for both simple display of data as well as continuous display of high-volume data often referred to as plotters . The charts use a system called distance fields for their...

[SECURITY] Fedora 44 Update: kf6-kplotting-6.25.0-1.fc44

KPlotting provides classes to do plotting...

backtrader-plotting (1.0.0), biocrnpyler (0.2.1) +31 more potentially affected by CVE-2026-21883 via bokeh (1.4.0)

bokeh PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - backtrader-plotting 1.0.0 - biocrnpyler 0.2.1 - chartify =2.3.4, =0.2.78, =0.10.0, =0.8.0, =0.4.0, =0.1.0, =0.2.76, =0.1.0a1, =0.10.1.post1, =0.7.4,...

GNUPlot Null Pointer DoS

The vulnerability of GNUPlot’s graph creation software relates to the handling of the null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

PlotAI command injection vulnerability

PlotAI is an open source plotting assistant for MLJAR. A security vulnerability exists in PlotAI 0.0.6 and earlier versions, which stems from a lack of validation of LLM-generated output and could lead to remote code execution...

DEBIAN-CVE-2024-34490

In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local attacker who can create files in advance with these names. This affects, for example, plot2d...

CVE-2024-34490

In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local attacker who can create files in advance with these names. This affects, for example, plot2d...

CVE-2024-34490

In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local attacker who can create files in advance with these names. This affects, for example, plot2d...

UBUNTU-CVE-2024-34490

In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local attacker who can create files in advance with these names. This affects, for example, plot2d...

CVE-2024-34490

The Maxima computer algebra system (versions through 5.47.0 before 51704c ) is vulnerable to a local security issue involving its plotting facilities , such as plot2d . The software uses predictable filenames in the /tmp directory, allowing a local attacker to pre-create files with those specific...

CVE-2024-34490

In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local attacker who can create files in advance with these names. This affects, for example, plot2d...

CVE-2024-34490

In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local attacker who can create files in advance with these names. This affects, for example, plot2d...

CVE-2024-34490

In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local attacker who can create files in advance with these names. This affects, for example, plot2d...